Summary Sheet: I.T. & Communications |
| | | | | |
| Advertiser Name | MCKESSON | | Advertiser Type: | Company |
| Classification: | I.T. & Communications | | Subclassification: | |
| Country: | Canada | | Location: | Canada |
| Language: | English - United Kingdom (en-GB) | | Contact Name: | |
| Employment Type: | Permanent | | Workhours: | Not Specified |
Position: Cybersecurity Automation Lead |
Description: McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.
Job Title
Lead Automation Engineer
Summary We are seeking a Lead Automation Engineer (P5) to design, deliver, and scale automation that powers our cybersecurity platforms and operations. You will own the automation strategy and execution across SIEM, SOAR, endpoint, vulnerability, and cloud-security workflows-eliminating manual toil, standardizing deployments, and embedding reliability into the way we operate.
Location note: this is a remote role within 50km of Mississagua Ontario or St Laurent Quebec, or Calgary, AB, or Vancouver, BC
What You'll Do
- Own the automation roadmap aligned to platform runbooks and quarterly objectives; prioritize high-value use cases that reduce manual effort and improve speed/quality.
- Design, implement, and maintain Python-based playbooks, micro-services, and scripts for enrichment, decisioning, remediation, and evidence collection.
- Deliver self-service capabilities (CLI/ChatOps/UI) that enable platform teams and SOC/IR to perform standardized actions safely and repeatedly.
- Build robust API integrations between security tools and enterprise systems (e.g., SIEM/SOAR, endpoint, vulnerability scanners, ticketing/ServiceNow, CMDB, identity, cloud services).
- Implement CI/CD workflows (GitHub Actions/Azure DevOps/GitLab CI), environment promotion, secrets management, and rollback safety for automation code.
- Add observability to automation (structured logging, metrics, traces, alerts); track playbook success/failure, latency, and error budgets.
- Act as technical lead for automation initiatives; mentor engineers on Python, integration patterns, and CI/CD.
- Partner closely with SOC/IR, Platform Ops, Cloud/Infra, and GRC to align automation to operational, resilience, and compliance needs.
What You Bring
- Expert-level Python (designing maintainable packages/services, async patterns where useful, testing, packaging, dependency management).
- Practical experience building API integrations (REST/GraphQL), handling auth flows (OAuth2, JWT), and working with JSON/structured logs.
- Demonstrated DevOps capability: CI/CD pipelines, artifact versioning, release orchestration, and basic container familiarity (Docker).
- Hands-on with at least two security/platform domains (e.g., SIEM/SOAR, endpoint/EDR, vulnerability management, email/data security, cloud security).
- Strong communication skills and a track record of shipping reliable automation that measurably improves operations.
Minimum Requirements
- Degree or equivalent and typically requires 10+ years of relevant experience. Less years required if has relevant Master's or Doctorate qualifications.
Preferable Skills & Experience
- Experience with Terraform or Ansible for provisioning/configuration.
- Familiarity with event-driven patterns (webhooks, message queues) and serverless runtimes.
- Experience optimizing cost/throughput for data pipelines or security platform ingestion.
- Comfort with basic front-end for internal self-service tools (e.g., lightweight UIs, ChatOps).
What Success Would Look Like
- Toil reduction and time-to-complete improvements for automated workflows.
- Playbook success rate, latency, and reduction in manual escalations.
- Coverage of automation across priority platforms (e.g., % alerts triaged/enriched automatically, % standard changes automated).
- Deployment reliability (pipeline success, rollback readiness, change-related incident reduction).
- Quality and completeness of audit-ready evidence produced automatically by automation jobs.
Tools & Environment
Language: Python (primary)
DevOps: GitHub/GitHub Actions or Azure DevOps; container builds; secrets management (e.g., Key Vault/Secrets Manager)
Integrations: REST/GraphQL APIs, ServiceNow/CMDB, identity platforms, cloud provider SDKs
Security platforms: SIEM/SOAR (e.g., Splunk, Cortex XSIAM/XSOAR), EDR (e.g., SentinelOne/Defender), Vulnerability Mgmt (e.g., Rapid7/Tenable), Email/Data Security (e.g., MDO/Proofpoint)
Nice-to-have: Terraform/Ansible, message queues (Event Hub/Kafka/SQS), simple UI/ChatOps front-ends
Intitulİ du poste
Ingİnieur/e principal en automatisation
Rİsumİ Nous recherchons un/e Ingİnieur/e principal en automatisation (P5) pour concevoir, livrer et faire İvoluer des automatisations qui alimentent nos plateformes et opİrations de cybersİcuritİ. Vous serez responsable de la stratİgie et de l'exİcution de l'automatisation travers les flux SIEM, SOAR, endpoints, gestion des vulnİrabilitİs et sİcuritİ cloud - en İliminant les t˘ches manuelles, en standardisant les dİploiements et en intİgrant la fiabilitİ dans nos opİrations.
Note:
Poste distance, mais le candidat doit rİsider dans un rayon de 50 km de l'une des localisations suivantes : Mississauga, Ontario, Saint-Laurent, Quİbec, Calgary, Alberta, Vancouver, Colombie-Britannique
Ce que vous ferez
- Dİfinir et piloter la feuille de route d'automatisation alignİe sur les runbooks des plateformes et les objectifs trimestriels ; prioriser les cas d'usage forte valeur ajoutİe qui rİduisent l'effort manuel et amİliorent la rapiditİ/la qualitİ.
- Concevoir, implİmenter et maintenir des playbooks, micro-services et scripts en Python pour l'enrichissement, la prise de dİcision, la remİdiation et la collecte de preuves.
- Fournir des capacitİs en libre-service (CLI/ChatOps/UI) permettant aux İquipes plateformes et SOC/IR d'exİcuter des actions standardisİes de mani¨re sğre et rİpİtİe.
- Dİvelopper des intİgrations API robustes entre les outils de sİcuritİ et les syst¨mes d'entreprise (ex. SIEM/SOAR, endpoints, scanners de vulnİrabilitİs, ServiceNow/tickets, CMDB, identitİ, services cloud).
- Mettre en Ċuvre des workflows CI/CD (GitHub Actions/Azure DevOps/GitLab CI), la promotion des environnements, la gestion des secrets et la sİcuritİ des rollback pour le code d'automatisation.
- Ajouter de l'observabilitİ l'automatisation (logs structurİs, mİtriques, traces, alertes) ; suivre le succ¨s/İchec des playbooks, la latence et les budgets d'erreurs.
- Agir en tant que leader technique pour les initiatives d'automatisation ; encadrer les ingİnieurs sur Python, les mod¨les d'intİgration et le CI/CD.
- Collaborer İtroitement avec SOC/IR, Ops plateformes, Cloud/Infra et GRC pour aligner l'automatisation sur les besoins opİrationnels, de rİsilience et de conformitİ.
Ce que vous apportez
- Expertise avancİe en Python (conception de packages/services maintenables, mod¨les asynchrones, tests, packaging, gestion des dİpendances).
- Expİrience pratique dans la crİation d'intİgrations API (REST/GraphQL), la gestion des flux d'authentification (OAuth2, JWT) et la manipulation de JSON/logs structurİs.
- Compİtences dİmontrİes en DevOps : pipelines CI/CD, versioning des artefacts, orchestration des releases et familiaritİ avec les conteneurs (Docker).
- Expİrience pratique dans au moins deux domaines sİcuritİ/plateformes (ex. SIEM/SOAR, endpoint/EDR, gestion des vulnİrabilitİs, sİcuritİ email/donnİes, sİcuritİ cloud).
- Excellentes compİtences en communication et historique de livraisons fiables d'automatisations amİliorant les opİrations de mani¨re mesurable.
Exigences minimales Dipl´me ou İquivalent et gİnİralement 10+ annİes d'expİrience pertinente. Moins d'annİes requises si titulaire d'un Master ou Doctorat pertinent.
Compİtences et expİriences souhaitİes
- Expİrience avec Terraform ou Ansible pour le provisioning/la configuration.
- Familiaritİ avec les mod¨les İvİnementiels (webhooks, files de messages) et les environnements serverless.
- Expİrience dans l'optimisation des coğts/dİbits pour les pipelines de donnİes ou l'ingestion des plateformes de sİcuritİ.
- Aisance avec le dİveloppement front-end basique pour des outils internes en libre-service (ex. interfaces lİg¨res, ChatOps).
Indicateur de succ¨s
- Rİduction des t˘ches manuelles et amİlioration des dİlais d'exİcution pour les workflows automatisİs.
- Taux de succ¨s des playbooks, latence et rİduction des escalades manuelles.
- Couverture de l'automatisation sur les plateformes prioritaires (ex. % d'alertes triİes/enrichies automatiquement, % de changements standard automatisİs).
- Fiabilitİ des dİploiements (succ¨s des pipelines, prİparation des rollback, rİduction des incidents liİs aux changements).
- Qualitİ et exhaustivitİ des preuves prŞtes pour audit gİnİrİes automatiquement par les jobs d'automatisation.
Outils et environnement
Langage : Python (principal)
DevOps : GitHub/GitHub Actions ou Azure DevOps ; builds de conteneurs ; gestion des secrets (ex . click apply for full job details
|
